CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
BeyondTrust Remote Support Authentication Bypass and Arbitrary File Operation Advisory (CVE-2026-102764)
[Affected Scope] Internal messaging components of BeyondTrust Remote Support appliances.
[Impact] Unauthenticated remote attackers can bypass authentication via origin spoofing to perform arbitrary file operations, leading to full system compromise.
[Mitigation] Immediately apply the vendor-provided security patch (KB0024066) and restrict access to the management interface.
BeyondTrust Remote Support and Privileged Remote Access Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2026-1731) Urgent Security Advisory
[Affected Scope] BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA).
[Impact] Unauthenticated remote attackers can execute arbitrary operating system commands in the context of the 'site' user by sending specially crafted HTTP requests.
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to the management interface using IP whitelisting and WAF rules.
SimpleHelp Remote Support Software Arbitrary File Download and Path Traversal Vulnerability (CVE-2024-57727) Security Advisory
[Affected Scope] SimpleHelp remote support software v5.5.7 and prior
[Impact] Unauthenticated remote attackers can download arbitrary sensitive files, including server configuration files, secrets, and hashed user credentials, via crafted HTTP requests
[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and restrict external access to the console until patched
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability (CVE-2024-12686)
[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)
[Impact] An attacker with administrative privileges can inject arbitrary OS commands and execute them with site user privileges
[Mitigation] Immediately apply the official security patches provided by BeyondTrust (Advisory BT24-11)
BeyondTrust Privileged Remote Access (PRA) & Remote Support (RS) Unauthenticated Remote Command Injection Vulnerability (CVE-2024-12356) Security Advisory
[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) affected versions
[Impact] Unauthenticated remote attackers can inject and execute arbitrary system commands with the privileges of the 'site user'.
[Mitigation] Immediately apply the official security patches provided by BeyondTrust (BT24-10) and restrict access to management interfaces.